Eric Wolz

# Checklist - [x] I have read the [contribution guidelines] (https://github.com/Azure/azure-iot-sdk-c/blob/main/.github/CONTRIBUTING.md). - [ ] I added or modified the existing tests to cover the change (we do not allow our...

# Checklist - [x] I have read the [contribution guidelines] (https://github.com/Azure/azure-iot-sdk-c/blob/main/.github/CONTRIBUTING.md). - [ ] I added or modified the existing tests to cover the change (we do not allow our...

Origin branch rename master=>main

1

Please be aware that this may impact your build scripts.

Incorrect Calculation _az_http_policy_logging_append_http_request_msg()

4

File : sdk\src\azure\core\az_http_policy_logging.c • API : _az_http_policy_logging_append_http_request_msg( ) • Line : 73 • Issue : Incorrect calculation of required_length. • The value needs to be incremented, not reassigned. • Required...

az_json_writer_chunked_init( ) - Improper Input Validation (CWE-20)

2

Data from External Sources to Internal APIs of the SDK needs Sanitization and Validation. • File : **src\azure\core\az_json_writer.c** • API : **az_json_writer_chunked_init( )** • Lines : **38 – 62** •...

Data from one API to another API of the SDK needs Sanitization and Validation

2

**Improper Input Validation (CWE-20) inside Trust Boundary:** • Data from one API to another API of the SDK needs Sanitization and Validation, for future safety concerns. > `All internal APIs...

**Integer Overflow (CWE-190):** • The result of addition must be verified before assignment. • File : src\azure\core\az_json_writer.c • API : _az_update_json_writer_state ( ) • Lines : 393 – 394 •...

Overshoots the allocated Memory for destination, leads to over-writing other variables in adjacent memory. File: **src\azure\core\az_json_writer.c** API: **_az_json_writer_escape_and_copy ( )** Line: 379 Issue: During encoding, if the source contains: -...

# Checklist - [ ] I have read the [contribution guidelines] (https://github.com/Azure/azure-iot-sdk-c/blob/main/.github/CONTRIBUTING.md). - [ ] I added or modified the existing tests to cover the change (we do not allow...

Update DPS API vertion to 2021-06-01

2

# Checklist - [ ] I have read the [contribution guidelines] (https://github.com/Azure/azure-iot-sdk-c/blob/main/.github/CONTRIBUTING.md). - [ ] I added or modified the existing tests to cover the change (we do not allow...